Network Engineer

Network Engineer - Hybrid Cloud & Secure Connectivity
Richmond, VA (Hybrid) | Long-Term Contract | C2C

About the Role
Join a mission-critical project supporting secure, resilient network operations across 500+ remote sites for law enforcement and public safety systems. As a Network Engineer, you'll design, secure, and manage hybrid cloud networks spanning on-premises and AWS, driving a major cloud migration while maintaining seamless connectivity for vital applications. This position offers hands-on experience with advanced AWS networking, VPN engineering, and enterprise security frameworks in a collaborative, hybrid work environment.

Responsibilities

- Architect, secure, and operate high-availability networks supporting public safety and law enforcement infrastructure.
- Manage routing, switching, firewall policies, ACLs, and network device configurations for 500+ remote locations.
- Design, implement, and support redundant IPsec VPNs with BGP-based failover, ensuring uninterrupted connectivity.
- Deploy and maintain AWS networking components (VPCs, Transit Gateway, Direct Connect, Route 53, Security Groups, Network ACLs).
- Execute quarterly reviews of policies, controls, and configurations to ensure CJIS and regulatory compliance.
- Perform site surveys, modernization assessments, and support new site implementations.
- Troubleshoot and resolve network outages, performance, and connectivity issues, participating in a 24x7 on-call rotation.
- Engineer network automation and Infrastructure-as-Code solutions using Terraform, CloudFormation, and Ansible.
- Lead disaster recovery planning, security incident response, and compliance monitoring.
- Develop and maintain comprehensive network documentation, diagrams, standards, and runbooks.
- Collaborate with cloud engineering, vendors, and state partners for secure, compliant solutions.

Required Skills and Experience

- 10+ years of enterprise network engineering experience with expertise in routing, switching, firewalls, and redundancy.
- Proven experience designing and supporting large-scale IPsec VPNs with BGP failover in production environments.
- Advanced AWS networking experience: VPC, Transit Gateway, Direct Connect, Site-to-Site VPN, Route 53, Security Groups, Network ACLs.
- Deep knowledge of network security, segmentation, encryption, and device hardening.
- Strong background with ITSM tools (ServiceNow, FootPrints) and supporting 24x7 mission-critical environments.
- Infrastructure as Code delivery using Terraform or CloudFormation.
- Familiarity with CJIS, COV, or similar regulatory frameworks; ability to pass CJIS background investigation.

Preferred Skills

- Experience supporting law enforcement or public safety systems (VCIN, CCH, LiveScan).
- Knowledge of VITA/SAIC operational processes.
- Familiarity with Juniper, Cisco, Palo Alto, Fortinet, Check Point, and WAN technologies (SD-WAN, MPLS).
- Network automation with Python, Ansible, and CI/CD pipelines.
- Experience with AWS Network Firewall, hybrid DNS, IPAM, and observability platforms (CloudWatch, Prometheus, Grafana, SolarWinds, Datadog).
- Relevant certifications: CCNP/CCIE, JNCIP/JNCIE, PCNSE, AWS Advanced Networking - Specialty, AWS Security - Specialty.

Benefits

- Long-term, multi-year contract with stable, high-impact projects.
- Hybrid work model based in Richmond, VA.
- Hands-on experience with leading-edge AWS and network security technologies.
- Opportunity to support public safety and law enforcement initiatives.
- Professional development in cloud, automation, and security frameworks.

How to Apply
Ready to take your network engineering career to the next level? Submit your resume today for immediate consideration. Face-to-face interview required. Candidates must be able to pass a CJIS background check and authorized to work without sponsorship.

(JSON format)